This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/GztDcv1wOIshQxIOLwJqTJDSyGw.roa File: GztDcv1wOIshQxIOLwJqTJDSyGw.roa (raw, json) Hash identifier: qFDHdyDAkwjk96ej9WLJA+3FYjQLPrqczmkb2Ix2yaY= Subject key identifier: 1B:3B:43:72:FD:70:38:8B:21:43:12:0E:2F:02:6A:4C:90:D2:C8:6C Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 019A731C8074527A54207093229CF308E642 Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/GztDcv1wOIshQxIOLwJqTJDSyGw.roa Signing time: Tue 11 Nov 2025 13:30:38 +0000 ROA not before: Tue 11 Nov 2025 13:30:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209641 IP address blocks: 2a0e:4585::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:73:1c:80:74:52:7a:54:20:70:93:22:9c:f3:08:e6:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Nov 11 13:30:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1b3b4372fd70388b2143120e2f026a4c90d2c86c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:90:bd:15:e5:aa:d5:ab:fb:d7:be:c0:d7:b6: 48:88:28:e8:ee:be:76:82:e9:8b:78:e1:96:d3:d8: c0:eb:30:cd:e2:eb:e9:6e:f9:1c:9b:fe:48:9a:2c: f3:08:4e:a6:1c:0d:62:91:4d:3d:15:c9:a6:78:80: 05:81:14:5f:13:a1:2f:1f:f0:7d:e9:2e:05:3e:08: 39:5d:32:7e:ce:ab:e6:94:99:7f:62:d7:d4:f7:b6: 5f:48:b9:59:54:73:a4:0f:b1:f3:a3:95:d6:c0:72: 16:80:38:1f:42:f3:d2:15:3b:f3:cb:af:1a:74:ba: 37:d5:33:75:9a:dd:51:7d:d1:1f:82:62:5c:14:b1: 7b:ef:98:1d:cc:f7:09:34:ee:52:78:ca:5d:ac:f8: 1b:4f:88:73:71:73:cf:c2:90:d8:17:aa:7f:e6:8d: 3f:51:f9:d1:3b:c7:04:e2:99:97:4e:59:a7:8f:ac: 02:6e:3a:9f:49:8c:26:5e:de:7b:06:27:50:97:c0: 69:7b:81:cc:00:3e:7f:1d:15:0c:83:2b:41:9d:8e: e5:9b:35:46:1b:5f:e3:54:05:b3:24:75:0a:e2:a0: 2b:0d:f8:4d:1a:b7:2d:6a:ea:af:d0:a1:c0:b5:45: 11:c9:e2:3f:47:71:c5:4a:01:ae:75:31:77:ba:5a: 50:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3B:43:72:FD:70:38:8B:21:43:12:0E:2F:02:6A:4C:90:D2:C8:6C X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/GztDcv1wOIshQxIOLwJqTJDSyGw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0e:4585::/32 Signature Algorithm: sha256WithRSAEncryption 95:46:10:25:7e:04:e5:ff:99:ef:34:78:7c:ad:b4:7e:b5:2c: a6:ba:a6:d7:ac:f4:34:d0:0d:c1:3a:40:d4:43:d6:ce:7a:96: 16:42:b3:95:34:d9:c7:eb:42:ea:e5:6f:2d:7d:bc:fb:30:91: 63:30:2f:9a:be:23:4f:ec:49:24:cf:60:ad:93:6f:63:37:c6: 90:df:0a:b7:7e:57:af:74:d9:80:60:3a:db:66:b9:92:c9:99: b6:92:b1:f4:c6:3f:84:48:5d:60:ce:bb:3f:ff:13:a1:5e:36: 20:c7:1c:5e:4f:b2:67:ff:50:8f:43:7b:9c:8f:94:ca:09:54: 74:3d:00:46:c3:f6:35:33:a7:32:7c:cb:0e:ef:64:40:d0:34: ad:a8:9d:1b:08:4f:7e:6a:a2:7b:c1:9f:d5:3e:10:5e:db:2e: 71:ec:95:a9:cf:a6:55:a4:63:55:0f:97:b3:83:ae:07:9b:ca: 7a:23:e3:fc:eb:1d:93:b0:7e:45:4f:c2:a1:8d:4f:60:00:8f: 55:40:ff:64:4a:8a:fe:ad:bf:a3:41:23:24:60:ba:b3:0a:62: e3:13:02:d7:f1:c5:aa:56:47:b5:09:10:d3:66:dd:42:6b:61: fd:d5:da:d0:f4:cb:83:79:a6:65:ba:86:05:44:66:e9:ef:60: de:ed:f2:ed -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZpzHIB0UnpUIHCTIpzzCOZCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjUxMTExMTMzMDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjNiNDM3MmZkNzAzODhiMjE0MzEyMGUyZjAyNmE0YzkwZDJjODZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZC9FeWq1av7177A17ZIiCjo7r52 gumLeOGW09jA6zDN4uvpbvkcm/5ImizzCE6mHA1ikU09FcmmeIAFgRRfE6EvH/B9 6S4FPgg5XTJ+zqvmlJl/YtfU97ZfSLlZVHOkD7Hzo5XWwHIWgDgfQvPSFTvzy68a dLo31TN1mt1RfdEfgmJcFLF775gdzPcJNO5SeMpdrPgbT4hzcXPPwpDYF6p/5o0/ UfnRO8cE4pmXTlmnj6wCbjqfSYwmXt57BidQl8Bpe4HMAD5/HRUMgytBnY7lmzVG G1/jVAWzJHUK4qArDfhNGrctauqv0KHAtUURyeI/R3HFSgGudTF3ulpQYwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBs7Q3L9cDiLIUMSDi8CakyQ0shsMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvR3p0RGN2MXdPSXNoUXhJT0x3SnFUSkRTeUd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKg5FhTAN BgkqhkiG9w0BAQsFAAOCAQEAlUYQJX4E5f+Z7zR4fK20frUsprqm16z0NNANwTpA 1EPWznqWFkKzlTTZx+tC6uVvLX28+zCRYzAvmr4jT+xJJM9grZNvYzfGkN8Kt35X r3TZgGA622a5ksmZtpKx9MY/hEhdYM67P/8ToV42IMccXk+yZ/9Qj0N7nI+UyglU dD0ARsP2NTOnMnzLDu9kQNA0raidGwhPfmqie8Gf1T4QXtsuceyVqc+mVaRjVQ+X s4OuB5vKeiPj/Osdk7B+RU/CoY1PYACPVUD/ZEqK/q2/o0EjJGC6swpi4xMC1/HF qlZHtQkQ02bdQmth/dXa0PTLg3mmZbqGBURm6e9g3u3y7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:42:38 2025 by rpki-client